Senior IT Security Engineer at Codeway

on-site · full_time · Visa sponsorship

Apply for this role at Codeway

Responsibilities:
- Design, implement, and iterate security controls across identity, endpoints, SaaS platforms, and cloud infrastructure.
- Lead Security Operations: improve monitoring, detection, SIEM/CSPM integrations, and alerting to reduce time-to-detect.
- Run incident response: investigate events, coordinate cross-team response, update playbooks and runbooks.
- Build and operate vulnerability management processes: scanning, triage, prioritization, remediation tracking.
- Strengthen identity controls: MFA, conditional access, privileged access management, device trust, and governance.
- Establish endpoint standards and remediation workflows (EPP/XDR integration, patching, configuration baselines).
- Partner with IT, Engineering, and product teams to evaluate vendor security, onboard SaaS securely, and review architecture.
- Automate repetitive security tasks and integrations via scripting and APIs to scale operations.
- Define and report security metrics that inform prioritization and demonstrate control effectiveness.

Requirements:
- Proven experience building security controls in cloud-first environments (identity, SaaS, endpoints, cloud).
- Hands-on incident response and security operations experience with SIEM/XDR/CSPM tooling.
- Strong fundamentals in identity management (Okta/Google Workspace), MFA, conditional access and PAM.
- Experience with vulnerability management, endpoint security, and secure cloud configuration (AWS/GCP).
- Practical scripting or API automation skills to integrate tools and reduce manual work (e.g., Python, Terraform, REST APIs).
- Ability to work collaboratively with IT and engineering stakeholders and to build pragmatic, business-aligned security solutions.